$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa File: 40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa (raw, json) Hash identifier: BYOJOsFN5V7cegI2E/442zrdbYdDrcRLrz/QBw937qM= Subject key identifier: B0:53:54:B4:52:E5:EE:B9:7A:45:EE:D8:6E:91:3C:39:3B:32:0E:1C Certificate issuer: /CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Certificate serial: 010D0C9F4328584D7CCFDCC6978B6D459960F520 Authority key identifier: 5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 35972 IP address blocks: 23.130.236.0/24 maxlen: 24 2602:f76d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:dc:c6:97:8b:6d:45:99:60:f5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=f8d0601e-f018-43f3-8dda-5a079e460127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:8e:34:78:ce:5f:e0:b2:09:67:20:42:5e: 04:1d:13:2a:4a:9f:02:4e:71:fc:63:ae:7b:01:6f: a1:83:5e:e1:33:cb:03:ab:70:dc:e4:41:e6:bc:2d: 87:16:c1:50:16:0f:c0:27:73:6d:d3:a2:57:c8:84: 3f:56:24:69:f2:92:70:51:e8:71:ca:05:67:0f:f7: 78:20:3b:3d:b7:43:f7:30:f1:7c:e3:16:6c:fd:f2: ac:92:6e:16:2e:dd:ce:ec:d3:28:ae:ee:69:bc:fb: 0d:a3:ea:46:f0:34:ef:bb:0f:f9:b3:86:ab:b2:e3: 18:20:51:40:00:a3:b3:ce:63:43:36:58:2f:20:10: 44:36:07:07:c5:f7:7c:69:f8:3f:b2:35:a2:dc:4c: 85:77:8d:db:93:52:8b:9e:64:8d:52:c1:cd:fc:0e: 4b:a1:68:e1:d4:1b:b6:eb:f8:33:24:4e:d2:01:ac: 77:33:7b:b5:3b:37:b1:5a:4f:2e:8a:ea:be:88:29: 5c:cf:f8:8a:b4:ed:54:2b:e0:b4:a1:22:a2:7c:64: f6:34:66:76:7d:93:34:57:b5:df:8c:0b:df:40:64: 0b:93:a4:52:34:1d:2e:b8:69:f7:f1:c0:52:cb:94: b8:a2:78:f0:a5:ef:56:15:a8:1e:f4:17:4a:10:cc: 6d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:53:54:B4:52:E5:EE:B9:7A:45:EE:D8:6E:91:3C:39:3B:32:0E:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl X509v3 Authority Key Identifier: keyid:5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer sbgp-ipAddrBlock: critical IPv4: 23.130.236.0/24 IPv6: 2602:f76d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:db:e1:26:0b:e5:c5:aa:ff:a3:47:e7:19:9a:51:9f:ad:ea: b2:80:3f:ba:9b:39:9b:86:52:47:fe:2f:7b:b1:82:03:7e:bd: 0c:d5:d6:13:cc:55:ad:39:e6:08:5e:a7:10:2a:46:d8:4a:c3: 0a:84:8f:2e:aa:00:12:09:3d:8c:c0:10:26:da:71:60:68:8d: d0:11:00:79:a9:9a:1d:1b:8d:d1:bf:1c:0a:5b:1c:5a:06:31: 00:30:a1:7c:a3:b8:23:71:19:71:47:f6:6c:3d:ac:55:ad:64: 04:31:0b:72:58:f2:67:8c:02:db:e7:1e:11:a9:99:e5:2e:d5: 8e:12:c4:f4:31:01:f3:5f:5a:c6:1d:b8:6f:d2:7d:7d:d2:0d: 7e:34:2f:08:51:99:31:33:bb:fb:31:66:8d:e2:38:ab:5d:80: 95:37:1e:f5:aa:3b:a6:e4:39:77:8c:c3:cb:52:86:6a:c3:7f: e7:cd:4c:91:7f:98:6f:15:d8:33:70:3d:eb:33:48:9e:b8:21: 3b:28:5e:e2:14:ea:15:86:30:eb:36:26:a6:3e:e3:b3:2d:7f: 2e:8c:f1:76:12:6e:35:c4:fd:3f:7b:42:17:a9:6f:06:9e:97: ef:aa:d4:2c:50:09:41:4e:76:9e:72:68:20:1f:8a:93:c9:f5: 6f:79:01:76 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE18z9zGl4ttRZlg9SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRhNGI3ZGMtNmU0My00MjkwLTg2ZDYtODRlODExMzlm MTY0MB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk ZjhkMDYwMWUtZjAxOC00M2YzLThkZGEtNWEwNzllNDYwMTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsiONHjOX+CyCWcgQl4EHRMqSp8CTnH8Y657 AW+hg17hM8sDq3Dc5EHmvC2HFsFQFg/AJ3Nt06JXyIQ/ViRp8pJwUehxygVnD/d4 IDs9t0P3MPF84xZs/fKskm4WLt3O7NMoru5pvPsNo+pG8DTvuw/5s4arsuMYIFFA AKOzzmNDNlgvIBBENgcHxfd8afg/sjWi3EyFd43bk1KLnmSNUsHN/A5LoWjh1Bu2 6/gzJE7SAax3M3u1OzexWk8uiuq+iClcz/iKtO1UK+C0oSKifGT2NGZ2fZM0V7Xf jAvfQGQLk6RSNB0uuGn38cBSy5S4onjwpe9WFage9BdKEMxtcQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLBTVLRS5e65ekXu2G6RPDk7Mg4cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0 YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4MTEzOWYxNjQvNDBmMWJlM2ItMjFhYi0z ZTBkLWJiOTEtYzdjMzFkZGUwNGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmRhNGI3ZGMtNmU0My00MjkwLTg2 ZDYtODRlODExMzlmMTY0LzJkYTRiN2RjLTZlNDMtNDI5MC04NmQ2LTg0ZTgxMTM5 ZjE2NC5jcmwwHwYDVR0jBBgwFoAUWi3iX0nJqZfOibJXvqQfII4OLs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4 MTEzOWYxNjQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4LsMA4E AgACMAgDBgQmAvdtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAM2+EmC+XFqv+jR+cZmlGfreqygD+6mzmb hlJH/i97sYIDfr0M1dYTzFWtOeYIXqcQKkbYSsMKhI8uqgASCT2MwBAm2nFgaI3Q EQB5qZodG43RvxwKWxxaBjEAMKF8o7gjcRlxR/ZsPaxVrWQEMQtyWPJnjALb5x4R qZnlLtWOEsT0MQHzX1rGHbhv0n190g1+NC8IUZkxM7v7MWaN4jirXYCVNx71qjum 5Dl3jMPLUoZqw3/nzUyRf5hvFdgzcD3rM0ieuCE7KF7iFOoVhjDrNiamPuOzLX8u jPF2Em41xP0/e0IXqW8GnpfvqtQsUAlBTnaecmggH4qTyfVveQF2 -----END CERTIFICATE-----Generated at Fri Apr 17 15:27:08 2026 by rpki-client